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Additional Information: full citation , abstract , references , citings , index 
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An organized record of actual flaws can be useful to computer system designers, 
programmers, analysts, administrators, and users. This survey provides a taxonomy for 
computer program security flaws, with an Appendix that documents 50 actual security 
flaws. These flaws have all been described previously in the open literature, but in widely 
separated places. For those new to the field of computer security, they provide a good 
introduction to the characteristics of security flaws and how they ... 
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Full text available: ' Ppdf(631.90 KB) 
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Virusefs propagate easily with economic consequences that are difficult to estimate. 
Appropriate means of prevention, detection and protection are needed to preserve 
integrity and availability of computer systems. Prophylaxis effects first have to be 
reasearched to provide data for choice of appropriate measures according to the general 
security policy. Several models for virus propagations borrowed from biology have been 
devejpped in the continuous case to indicate that segr ... 
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Full text available: 'p. l pdf(236.44 KB) ' '. ' 

terms 

Early 'systems for networked intrusion detection (or, more generally, intrusion or misuse 
management) required either a centralized architecture or a centralized decision-making 
poini>^even when the data gathering was distributed. More recently, researchers have 
devdroped far more decentralized intrusion detection systems using a variety of 
tecKnijques. Such systems often rely upon data sharing between sites which do not have a 
common administrator and therefore cooperation will be required i ... 

Keywords: access control models, authorization mechanisms, collaborative systems 
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^ October 1997 Communications of the ACM, Volume 4o issue lo 

>^ Publisher: ACM Press 

Full text available: "Pl pdff 460.66 KB) Additional Information: full citation , references , citings , index terms 



11 Incremental cryptography and application to vims protection 
Mihir Bell^Ve, Oded Goldreich, Shafi Goldwasser 

^ May 1995 Proceedings of the twenty-seventh annual ACM symposium on Theory of 
computing STOC '95 
PublisHcK XCM Press 

Full text^ay^lable: P |pdf(1.65 MB) Additional Information: full citation , references , citings , index terms 
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Alvaro.Hermlda 

Decennber^1992 Proceedings of the conference on TRI-Ada '92 TRI-Ada '92 
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13 An equational obiect-oriented data model and its data-parallel query language 
Susumu Nishimura, Atsushi Ohori, Keishi Tajima 

^ October 1996 ACM SIGPLAN Notices , Proceedings of the 11th ACM SIGPLAN 

conference on Object-oriented programming, systems, languages, and 

applications OOPSLA '96, Volume 31 issue 10 

Publisher: ACM Press 

^ M. ^ ' ^ no KiiDx Additional Information: full citation , abstract, references , citings, index 

Full text available: TO pdf 1.98 MB) 

"•^-J^ terms 

This paper presents an equational formulation of an object-oriented data model. In this 
model, a database is represented as a system of equations over a set of oid's, and a 
database query is a transformation of a system of equations into another system of 
equatiQns. During the query processing, our model maintains an equivalence relation over 
oid's ttjat relates oid's corresponding to the same "real-world entity." By this mechanism, 
the model achieves a declarative set-based query I ... 

14 The design and implennentation of tripwire: a file system integrity checker 
Gene H. Kim, Eugene H. Spafford 

^ November 1994 Proceedings of the 2nd ACM Conference on Computer and 
communications security CCS '94 
Publisher:|ACM Press 

^ n . ^ \ u. isit on Additional Information: full citation , abstract , references , citings, index 

Full text available: Ddff1.22 MB) 

At theJ^eart of most computer systems is a file system. The file system contains user 
data, ^ecutable programs, configuration and authorization information, and (usually) the 
base executable version of the operating system itself. The ability to monitor file systems 
for un^thorized or unexpected changes gives system administrators valuable data for 
protec|ng and maintaining their systems. However, in environments of many networked 
heterogeneous platforms with different policies and softw ... 

15 Biological versus computer viruses 

^ D. Guinierf- 

July 1989 ACM SIGSAC Review, volume 7 issue 2 

Publisher: ACM Press 

Full text available: "Pj pdf(933.73 KB) Additional Information: full citation , abstract , references, dtinqs, index 
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To understand biological viruses, some notions of the fundamental knowledge of the 
strtfeture of DNA, the genetic code, the biosynthesis of proteins, the transcription, 
repteaSion and transfer processes,... are presented so as to give an idea as to how the 
gerietlc^information is decrypted by biological mechanisms and consequently, how viruses 
wofk;A computer "virus" can be defined as a piece of code with a self-reproducing 
mechanism riding on other programs which cannot exist by it ... 

16 Optimization of relational algebra expressions containing recursion operators 
^ Ming-Chie*i Shan, Marie-Anne Neimat 

^ April 199f Proceedings of the 19th annual conference on Computer Science CSC '91 
Publisher ACM Press 

Full text.ayailable: ^ pdf(887.16 KB) Additional Information: full citation , references 




17 Temporal sequence learning and data reduction for anomaly detection \ 
Terran Lane, Caria E. Brodley 

August 19^ ACM Transactions on Information and System Security (TISSEC), volume 2 

Issue 3 

PublishervACM Press 

.- ri* \ ui ^ ^*/eoo OH iyD\ Additional Information: full citation , abstract , references , citinqs . index 

Full text available: pdf(628.31 KB) ; 

•i LJ-*^-' terms 

The anomaly-detection problem can be formulated as one of learning to characterize the 
behaliprs of an individual, system, or network in terms of temporal sequences of discrete 
dataL..^^e present an approach on the basis of instance-based learning (IBL) techniques. 
To c^tthe anomaly-detection task in an IBL framework, we employ an approach that 
tran^rms temporal sequences of discrete, unordered observations into a metric space 
via alwiilarity measure that encodes intra-attribute depende ... 

Key^rds: anomaly detection, clustering, data reduction, empirical evaluation, instance 
basepearning, machine learning, user profiling 

18 Sensitiv^ security points in PC microcomputers: understanding for building secure 

^ solutions to intrusions 
Daniel G^inier 

January '1i992 ACM SIGSAC Review, volume lo issue i 
Publishei^ ACM Press 

r- .. * ^ kL-i u. ^/-7ooocI^o^ Additional Information: full citation , abstract , references , citings . Index 

Full text a^^eilable: "p n pdff782.25 KB) ^ 

lij-'^-' terms 

The fmure of computer security is very dependent on the wild development of 
networking and microcomputing, and it is more and more difficult to protect 
micro|bmputers against enhanced piracy or "viruses". Also, a revision of such systems 
must^. taken into consideration involving machines, operating systems, applications and 
data%?avoid unauthorized access, abusive use of resources and losses of 
cohfi0ehtiality, integrity and availability.Solutions ... 

.V. 

Keywords: crime, detection intrusion model, intrusion, protection, security, virus 



1^ Privacy -policies and practices: inside the organizational maze 
^ H.Jeff Smith 

Decembervi993 Communications of the ACM, volume 36 issue 12 

Publisher: ACM Press 
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Bill Caidf|Stephen Gallant, Joel Carleton, David Sudbeck | 
Septem^er;1993 Proceedings of a workshop on held at Fredericksburg, Virginia: 
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Publish(9f|'^ssociation for Computational Linguistics 
Full text livable: '^ pdf(1.84 MB) Additional Information: full citation , abstract ; 

Durin/jphase I of the TIPSTER progrann, HNC developed a unique approach to machine 
learningjbf similarity of meaning. This approach, embodied in a system called 
"l^atchPlus", exploits this learned similarity of meaning for concept-based text retrieval, 
routiriig and visualization of textual information. MatchPlus uses an information 
representation scheme called "context vectors" to encode similarity of usage. Key 
attributes of the context vector approach are as follows:* Words, documents, and q ... 
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